Format: 1.8 Date: Thu, 19 Nov 2015 08:02:50 -0500 Source: libpng Binary: libpng12-0 libpng12-dev libpng3 libpng12-0-udeb Architecture: arm64 Version: 1.2.50-1ubuntu2.14.04.1 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libpng12-0 - PNG library - runtime libpng12-0-udeb - PNG library - minimal runtime library (udeb) libpng12-dev - PNG library - development libpng3 - PNG library - runtime Launchpad-Bugs-Fixed: 1516592 Changes: libpng (1.2.50-1ubuntu2.14.04.1) trusty-security; urgency=medium . [ Andrew Starr-Bochicchio ] * SECURITY UPDATE: Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE (LP: #1516592). - debian/patches/CVE-2015-8126.diff: Prevent writing over-length PLTE chunk and silently truncate over-length PLTE chunk while reading. Backported from upstream patch. - CVE-2015-8126 . [ Marc Deslauriers ] * SECURITY UPDATE: out of bounds read in png_set_tIME - debian/patches/CVE-2015-7981.patch: check bounds in png.c and pngset.c. - CVE-2015-7981 Checksums-Sha1: 2ba64afd992adac1d51ded45591e526ad6d7e19c 106260 libpng12-0_1.2.50-1ubuntu2.14.04.1_arm64.deb c7d048c3e2d34f2ce599bae73e5b8a9f3d75036f 200842 libpng12-dev_1.2.50-1ubuntu2.14.04.1_arm64.deb 109f89a2e559fe9e72d9c6ae2e0ebcd5e433d2d9 1002 libpng3_1.2.50-1ubuntu2.14.04.1_arm64.deb be09b252136c7a2376b2b453e23d03f4bd25397e 50540 libpng12-0-udeb_1.2.50-1ubuntu2.14.04.1_arm64.udeb 76d936a5a194157041d933836996d68d4391ce71 112978 libpng12-0-dbgsym_1.2.50-1ubuntu2.14.04.1_arm64.ddeb 9e58cf3cff9b9d7557026648ba0a4323ca812498 112974 libpng12-0-udeb-dbgsym_1.2.50-1ubuntu2.14.04.1_arm64.ddeb Checksums-Sha256: 8fbbf5a194f58614d33cfa7fd80173fc95dc410ff78399b04597c2a8a7394bdd 106260 libpng12-0_1.2.50-1ubuntu2.14.04.1_arm64.deb 6653f11221e4affc4d2e3be30b21db1e5754817d7505aa4f59a4adbc40883ad3 200842 libpng12-dev_1.2.50-1ubuntu2.14.04.1_arm64.deb 10df3c0f9e73a143629aa4166cae29a28a602b299fad2b4e953610abf5a6eb1c 1002 libpng3_1.2.50-1ubuntu2.14.04.1_arm64.deb 2d68700e5575d44eb31f8d863b0fc6db737ad51bb0d474dd342d8b065375a4c9 50540 libpng12-0-udeb_1.2.50-1ubuntu2.14.04.1_arm64.udeb 88ae7ebe6cb4567525997e525794ec7cd1ea93a2e88050310a3e45cee1163c2d 112978 libpng12-0-dbgsym_1.2.50-1ubuntu2.14.04.1_arm64.ddeb 0cec0eb9ce152eabac5bba36b7f6d487d4fc63372e5ee2d0064ed9a045e60c62 112974 libpng12-0-udeb-dbgsym_1.2.50-1ubuntu2.14.04.1_arm64.ddeb Files: e8548f0fdb203a8c223b0adcbf7f3f96 106260 libs optional libpng12-0_1.2.50-1ubuntu2.14.04.1_arm64.deb 9a83bf2c2dc57c9035a6e5709cc68bed 200842 libdevel optional libpng12-dev_1.2.50-1ubuntu2.14.04.1_arm64.deb 593124d0835a3cabd506a8612c6957bc 1002 oldlibs optional libpng3_1.2.50-1ubuntu2.14.04.1_arm64.deb 5715c98f6956ab05bb756eaedbb8db73 50540 debian-installer extra libpng12-0-udeb_1.2.50-1ubuntu2.14.04.1_arm64.udeb 69adef2adcd6bb1a5f1b78633b6595d9 112978 libs extra libpng12-0-dbgsym_1.2.50-1ubuntu2.14.04.1_arm64.ddeb 5e98da99f6180c0234de09a8a59a968a 112974 debian-installer extra libpng12-0-udeb-dbgsym_1.2.50-1ubuntu2.14.04.1_arm64.ddeb Original-Maintainer: Anibal Monsalve Salazar